PT-2019-15195

Name of the Vulnerable Software and Affected Versions Jiangnan Online Judge aka jnoj version 0.8.0 Description The issue allows for Directory Traversal, which can be exploited for file deletion. This is achieved through a specific substring in the "web/polygon/problem/deletefile" API endpoint,...

CVE-2019-17537: Improper Limitation of a Pathname to a Restricted Directory

Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring...